1 // SPDX-License-Identifier: GPL-2.0-only
2 /* Copyright (C) 2019 Chelsio Communications.  All rights reserved. */
3 
4 #include "cxgb4.h"
5 #include "cxgb4_tc_matchall.h"
6 #include "sched.h"
7 #include "cxgb4_uld.h"
8 #include "cxgb4_filter.h"
9 #include "cxgb4_tc_flower.h"
10 
cxgb4_policer_validate(const struct flow_action * action,const struct flow_action_entry * act,struct netlink_ext_ack * extack)11 static int cxgb4_policer_validate(const struct flow_action *action,
12 				  const struct flow_action_entry *act,
13 				  struct netlink_ext_ack *extack)
14 {
15 	if (act->police.exceed.act_id != FLOW_ACTION_DROP) {
16 		NL_SET_ERR_MSG_MOD(extack,
17 				   "Offload not supported when exceed action is not drop");
18 		return -EOPNOTSUPP;
19 	}
20 
21 	if (act->police.notexceed.act_id != FLOW_ACTION_PIPE &&
22 	    act->police.notexceed.act_id != FLOW_ACTION_ACCEPT) {
23 		NL_SET_ERR_MSG_MOD(extack,
24 				   "Offload not supported when conform action is not pipe or ok");
25 		return -EOPNOTSUPP;
26 	}
27 
28 	if (act->police.notexceed.act_id == FLOW_ACTION_ACCEPT &&
29 	    !flow_action_is_last_entry(action, act)) {
30 		NL_SET_ERR_MSG_MOD(extack,
31 				   "Offload not supported when conform action is ok, but action is not last");
32 		return -EOPNOTSUPP;
33 	}
34 
35 	if (act->police.peakrate_bytes_ps ||
36 	    act->police.avrate || act->police.overhead) {
37 		NL_SET_ERR_MSG_MOD(extack,
38 				   "Offload not supported when peakrate/avrate/overhead is configured");
39 		return -EOPNOTSUPP;
40 	}
41 
42 	if (act->police.rate_pkt_ps) {
43 		NL_SET_ERR_MSG_MOD(extack,
44 				   "QoS offload not support packets per second");
45 		return -EOPNOTSUPP;
46 	}
47 
48 	return 0;
49 }
50 
cxgb4_matchall_egress_validate(struct net_device * dev,struct tc_cls_matchall_offload * cls)51 static int cxgb4_matchall_egress_validate(struct net_device *dev,
52 					  struct tc_cls_matchall_offload *cls)
53 {
54 	struct netlink_ext_ack *extack = cls->common.extack;
55 	struct flow_action *actions = &cls->rule->action;
56 	struct port_info *pi = netdev2pinfo(dev);
57 	struct flow_action_entry *entry;
58 	struct ch_sched_queue qe;
59 	struct sched_class *e;
60 	u64 max_link_rate;
61 	u32 i, speed;
62 	int ret;
63 
64 	if (!flow_action_has_entries(actions)) {
65 		NL_SET_ERR_MSG_MOD(extack,
66 				   "Egress MATCHALL offload needs at least 1 policing action");
67 		return -EINVAL;
68 	} else if (!flow_offload_has_one_action(actions)) {
69 		NL_SET_ERR_MSG_MOD(extack,
70 				   "Egress MATCHALL offload only supports 1 policing action");
71 		return -EINVAL;
72 	} else if (pi->tc_block_shared) {
73 		NL_SET_ERR_MSG_MOD(extack,
74 				   "Egress MATCHALL offload not supported with shared blocks");
75 		return -EINVAL;
76 	}
77 
78 	ret = t4_get_link_params(pi, NULL, &speed, NULL);
79 	if (ret) {
80 		NL_SET_ERR_MSG_MOD(extack,
81 				   "Failed to get max speed supported by the link");
82 		return -EINVAL;
83 	}
84 
85 	/* Convert from Mbps to bps */
86 	max_link_rate = (u64)speed * 1000 * 1000;
87 
88 	flow_action_for_each(i, entry, actions) {
89 		switch (entry->id) {
90 		case FLOW_ACTION_POLICE:
91 			ret = cxgb4_policer_validate(actions, entry, extack);
92 			if (ret)
93 				return ret;
94 
95 			/* Convert bytes per second to bits per second */
96 			if (entry->police.rate_bytes_ps * 8 > max_link_rate) {
97 				NL_SET_ERR_MSG_MOD(extack,
98 						   "Specified policing max rate is larger than underlying link speed");
99 				return -ERANGE;
100 			}
101 			break;
102 		default:
103 			NL_SET_ERR_MSG_MOD(extack,
104 					   "Only policing action supported with Egress MATCHALL offload");
105 			return -EOPNOTSUPP;
106 		}
107 	}
108 
109 	for (i = 0; i < pi->nqsets; i++) {
110 		memset(&qe, 0, sizeof(qe));
111 		qe.queue = i;
112 
113 		e = cxgb4_sched_queue_lookup(dev, &qe);
114 		if (e && e->info.u.params.level != SCHED_CLASS_LEVEL_CH_RL) {
115 			NL_SET_ERR_MSG_MOD(extack,
116 					   "Some queues are already bound to different class");
117 			return -EBUSY;
118 		}
119 	}
120 
121 	return 0;
122 }
123 
cxgb4_matchall_tc_bind_queues(struct net_device * dev,u32 tc)124 static int cxgb4_matchall_tc_bind_queues(struct net_device *dev, u32 tc)
125 {
126 	struct port_info *pi = netdev2pinfo(dev);
127 	struct ch_sched_queue qe;
128 	int ret;
129 	u32 i;
130 
131 	for (i = 0; i < pi->nqsets; i++) {
132 		qe.queue = i;
133 		qe.class = tc;
134 		ret = cxgb4_sched_class_bind(dev, &qe, SCHED_QUEUE);
135 		if (ret)
136 			goto out_free;
137 	}
138 
139 	return 0;
140 
141 out_free:
142 	while (i--) {
143 		qe.queue = i;
144 		qe.class = SCHED_CLS_NONE;
145 		cxgb4_sched_class_unbind(dev, &qe, SCHED_QUEUE);
146 	}
147 
148 	return ret;
149 }
150 
cxgb4_matchall_tc_unbind_queues(struct net_device * dev)151 static void cxgb4_matchall_tc_unbind_queues(struct net_device *dev)
152 {
153 	struct port_info *pi = netdev2pinfo(dev);
154 	struct ch_sched_queue qe;
155 	u32 i;
156 
157 	for (i = 0; i < pi->nqsets; i++) {
158 		qe.queue = i;
159 		qe.class = SCHED_CLS_NONE;
160 		cxgb4_sched_class_unbind(dev, &qe, SCHED_QUEUE);
161 	}
162 }
163 
cxgb4_matchall_alloc_tc(struct net_device * dev,struct tc_cls_matchall_offload * cls)164 static int cxgb4_matchall_alloc_tc(struct net_device *dev,
165 				   struct tc_cls_matchall_offload *cls)
166 {
167 	struct ch_sched_params p = {
168 		.type = SCHED_CLASS_TYPE_PACKET,
169 		.u.params.level = SCHED_CLASS_LEVEL_CH_RL,
170 		.u.params.mode = SCHED_CLASS_MODE_CLASS,
171 		.u.params.rateunit = SCHED_CLASS_RATEUNIT_BITS,
172 		.u.params.ratemode = SCHED_CLASS_RATEMODE_ABS,
173 		.u.params.class = SCHED_CLS_NONE,
174 		.u.params.minrate = 0,
175 		.u.params.weight = 0,
176 		.u.params.pktsize = dev->mtu,
177 	};
178 	struct netlink_ext_ack *extack = cls->common.extack;
179 	struct cxgb4_tc_port_matchall *tc_port_matchall;
180 	struct port_info *pi = netdev2pinfo(dev);
181 	struct adapter *adap = netdev2adap(dev);
182 	struct flow_action_entry *entry;
183 	struct sched_class *e;
184 	int ret;
185 	u32 i;
186 
187 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
188 
189 	flow_action_for_each(i, entry, &cls->rule->action)
190 		if (entry->id == FLOW_ACTION_POLICE)
191 			break;
192 
193 	ret = cxgb4_policer_validate(&cls->rule->action, entry, extack);
194 	if (ret)
195 		return ret;
196 
197 	/* Convert from bytes per second to Kbps */
198 	p.u.params.maxrate = div_u64(entry->police.rate_bytes_ps * 8, 1000);
199 	p.u.params.channel = pi->tx_chan;
200 	e = cxgb4_sched_class_alloc(dev, &p);
201 	if (!e) {
202 		NL_SET_ERR_MSG_MOD(extack,
203 				   "No free traffic class available for policing action");
204 		return -ENOMEM;
205 	}
206 
207 	ret = cxgb4_matchall_tc_bind_queues(dev, e->idx);
208 	if (ret) {
209 		NL_SET_ERR_MSG_MOD(extack,
210 				   "Could not bind queues to traffic class");
211 		goto out_free;
212 	}
213 
214 	tc_port_matchall->egress.hwtc = e->idx;
215 	tc_port_matchall->egress.cookie = cls->cookie;
216 	tc_port_matchall->egress.state = CXGB4_MATCHALL_STATE_ENABLED;
217 	return 0;
218 
219 out_free:
220 	cxgb4_sched_class_free(dev, e->idx);
221 	return ret;
222 }
223 
cxgb4_matchall_free_tc(struct net_device * dev)224 static void cxgb4_matchall_free_tc(struct net_device *dev)
225 {
226 	struct cxgb4_tc_port_matchall *tc_port_matchall;
227 	struct port_info *pi = netdev2pinfo(dev);
228 	struct adapter *adap = netdev2adap(dev);
229 
230 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
231 	cxgb4_matchall_tc_unbind_queues(dev);
232 	cxgb4_sched_class_free(dev, tc_port_matchall->egress.hwtc);
233 
234 	tc_port_matchall->egress.hwtc = SCHED_CLS_NONE;
235 	tc_port_matchall->egress.cookie = 0;
236 	tc_port_matchall->egress.state = CXGB4_MATCHALL_STATE_DISABLED;
237 }
238 
cxgb4_matchall_mirror_alloc(struct net_device * dev,struct tc_cls_matchall_offload * cls)239 static int cxgb4_matchall_mirror_alloc(struct net_device *dev,
240 				       struct tc_cls_matchall_offload *cls)
241 {
242 	struct netlink_ext_ack *extack = cls->common.extack;
243 	struct cxgb4_tc_port_matchall *tc_port_matchall;
244 	struct port_info *pi = netdev2pinfo(dev);
245 	struct adapter *adap = netdev2adap(dev);
246 	struct flow_action_entry *act;
247 	int ret;
248 	u32 i;
249 
250 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
251 	flow_action_for_each(i, act, &cls->rule->action) {
252 		if (act->id == FLOW_ACTION_MIRRED) {
253 			ret = cxgb4_port_mirror_alloc(dev);
254 			if (ret) {
255 				NL_SET_ERR_MSG_MOD(extack,
256 						   "Couldn't allocate mirror");
257 				return ret;
258 			}
259 
260 			tc_port_matchall->ingress.viid_mirror = pi->viid_mirror;
261 			break;
262 		}
263 	}
264 
265 	return 0;
266 }
267 
cxgb4_matchall_mirror_free(struct net_device * dev)268 static void cxgb4_matchall_mirror_free(struct net_device *dev)
269 {
270 	struct cxgb4_tc_port_matchall *tc_port_matchall;
271 	struct port_info *pi = netdev2pinfo(dev);
272 	struct adapter *adap = netdev2adap(dev);
273 
274 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
275 	if (!tc_port_matchall->ingress.viid_mirror)
276 		return;
277 
278 	cxgb4_port_mirror_free(dev);
279 	tc_port_matchall->ingress.viid_mirror = 0;
280 }
281 
cxgb4_matchall_del_filter(struct net_device * dev,u8 filter_type)282 static int cxgb4_matchall_del_filter(struct net_device *dev, u8 filter_type)
283 {
284 	struct cxgb4_tc_port_matchall *tc_port_matchall;
285 	struct port_info *pi = netdev2pinfo(dev);
286 	struct adapter *adap = netdev2adap(dev);
287 	int ret;
288 
289 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
290 	ret = cxgb4_del_filter(dev, tc_port_matchall->ingress.tid[filter_type],
291 			       &tc_port_matchall->ingress.fs[filter_type]);
292 	if (ret)
293 		return ret;
294 
295 	tc_port_matchall->ingress.tid[filter_type] = 0;
296 	return 0;
297 }
298 
cxgb4_matchall_add_filter(struct net_device * dev,struct tc_cls_matchall_offload * cls,u8 filter_type)299 static int cxgb4_matchall_add_filter(struct net_device *dev,
300 				     struct tc_cls_matchall_offload *cls,
301 				     u8 filter_type)
302 {
303 	struct netlink_ext_ack *extack = cls->common.extack;
304 	struct cxgb4_tc_port_matchall *tc_port_matchall;
305 	struct port_info *pi = netdev2pinfo(dev);
306 	struct adapter *adap = netdev2adap(dev);
307 	struct ch_filter_specification *fs;
308 	int ret, fidx;
309 
310 	/* Get a free filter entry TID, where we can insert this new
311 	 * rule. Only insert rule if its prio doesn't conflict with
312 	 * existing rules.
313 	 */
314 	fidx = cxgb4_get_free_ftid(dev, filter_type ? PF_INET6 : PF_INET,
315 				   false, cls->common.prio);
316 	if (fidx < 0) {
317 		NL_SET_ERR_MSG_MOD(extack,
318 				   "No free LETCAM index available");
319 		return -ENOMEM;
320 	}
321 
322 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
323 	fs = &tc_port_matchall->ingress.fs[filter_type];
324 	memset(fs, 0, sizeof(*fs));
325 
326 	if (fidx < adap->tids.nhpftids)
327 		fs->prio = 1;
328 	fs->tc_prio = cls->common.prio;
329 	fs->tc_cookie = cls->cookie;
330 	fs->type = filter_type;
331 	fs->hitcnts = 1;
332 
333 	fs->val.pfvf_vld = 1;
334 	fs->val.pf = adap->pf;
335 	fs->val.vf = pi->vin;
336 
337 	cxgb4_process_flow_actions(dev, &cls->rule->action, fs);
338 
339 	ret = cxgb4_set_filter(dev, fidx, fs);
340 	if (ret)
341 		return ret;
342 
343 	tc_port_matchall->ingress.tid[filter_type] = fidx;
344 	return 0;
345 }
346 
cxgb4_matchall_alloc_filter(struct net_device * dev,struct tc_cls_matchall_offload * cls)347 static int cxgb4_matchall_alloc_filter(struct net_device *dev,
348 				       struct tc_cls_matchall_offload *cls)
349 {
350 	struct cxgb4_tc_port_matchall *tc_port_matchall;
351 	struct port_info *pi = netdev2pinfo(dev);
352 	struct adapter *adap = netdev2adap(dev);
353 	int ret, i;
354 
355 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
356 
357 	ret = cxgb4_matchall_mirror_alloc(dev, cls);
358 	if (ret)
359 		return ret;
360 
361 	for (i = 0; i < CXGB4_FILTER_TYPE_MAX; i++) {
362 		ret = cxgb4_matchall_add_filter(dev, cls, i);
363 		if (ret)
364 			goto out_free;
365 	}
366 
367 	tc_port_matchall->ingress.state = CXGB4_MATCHALL_STATE_ENABLED;
368 	return 0;
369 
370 out_free:
371 	while (i-- > 0)
372 		cxgb4_matchall_del_filter(dev, i);
373 
374 	cxgb4_matchall_mirror_free(dev);
375 	return ret;
376 }
377 
cxgb4_matchall_free_filter(struct net_device * dev)378 static int cxgb4_matchall_free_filter(struct net_device *dev)
379 {
380 	struct cxgb4_tc_port_matchall *tc_port_matchall;
381 	struct port_info *pi = netdev2pinfo(dev);
382 	struct adapter *adap = netdev2adap(dev);
383 	int ret;
384 	u8 i;
385 
386 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
387 
388 	for (i = 0; i < CXGB4_FILTER_TYPE_MAX; i++) {
389 		ret = cxgb4_matchall_del_filter(dev, i);
390 		if (ret)
391 			return ret;
392 	}
393 
394 	cxgb4_matchall_mirror_free(dev);
395 
396 	tc_port_matchall->ingress.packets = 0;
397 	tc_port_matchall->ingress.bytes = 0;
398 	tc_port_matchall->ingress.last_used = 0;
399 	tc_port_matchall->ingress.state = CXGB4_MATCHALL_STATE_DISABLED;
400 	return 0;
401 }
402 
cxgb4_tc_matchall_replace(struct net_device * dev,struct tc_cls_matchall_offload * cls_matchall,bool ingress)403 int cxgb4_tc_matchall_replace(struct net_device *dev,
404 			      struct tc_cls_matchall_offload *cls_matchall,
405 			      bool ingress)
406 {
407 	struct netlink_ext_ack *extack = cls_matchall->common.extack;
408 	struct cxgb4_tc_port_matchall *tc_port_matchall;
409 	struct port_info *pi = netdev2pinfo(dev);
410 	struct adapter *adap = netdev2adap(dev);
411 	int ret;
412 
413 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
414 	if (ingress) {
415 		if (tc_port_matchall->ingress.state ==
416 		    CXGB4_MATCHALL_STATE_ENABLED) {
417 			NL_SET_ERR_MSG_MOD(extack,
418 					   "Only 1 Ingress MATCHALL can be offloaded");
419 			return -ENOMEM;
420 		}
421 
422 		ret = cxgb4_validate_flow_actions(dev,
423 						  &cls_matchall->rule->action,
424 						  extack, 1);
425 		if (ret)
426 			return ret;
427 
428 		return cxgb4_matchall_alloc_filter(dev, cls_matchall);
429 	}
430 
431 	if (tc_port_matchall->egress.state == CXGB4_MATCHALL_STATE_ENABLED) {
432 		NL_SET_ERR_MSG_MOD(extack,
433 				   "Only 1 Egress MATCHALL can be offloaded");
434 		return -ENOMEM;
435 	}
436 
437 	ret = cxgb4_matchall_egress_validate(dev, cls_matchall);
438 	if (ret)
439 		return ret;
440 
441 	return cxgb4_matchall_alloc_tc(dev, cls_matchall);
442 }
443 
cxgb4_tc_matchall_destroy(struct net_device * dev,struct tc_cls_matchall_offload * cls_matchall,bool ingress)444 int cxgb4_tc_matchall_destroy(struct net_device *dev,
445 			      struct tc_cls_matchall_offload *cls_matchall,
446 			      bool ingress)
447 {
448 	struct cxgb4_tc_port_matchall *tc_port_matchall;
449 	struct port_info *pi = netdev2pinfo(dev);
450 	struct adapter *adap = netdev2adap(dev);
451 
452 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
453 	if (ingress) {
454 		/* All the filter types of this matchall rule save the
455 		 * same cookie. So, checking for the first one is
456 		 * enough.
457 		 */
458 		if (cls_matchall->cookie !=
459 		    tc_port_matchall->ingress.fs[0].tc_cookie)
460 			return -ENOENT;
461 
462 		return cxgb4_matchall_free_filter(dev);
463 	}
464 
465 	if (cls_matchall->cookie != tc_port_matchall->egress.cookie)
466 		return -ENOENT;
467 
468 	cxgb4_matchall_free_tc(dev);
469 	return 0;
470 }
471 
cxgb4_tc_matchall_stats(struct net_device * dev,struct tc_cls_matchall_offload * cls_matchall)472 int cxgb4_tc_matchall_stats(struct net_device *dev,
473 			    struct tc_cls_matchall_offload *cls_matchall)
474 {
475 	u64 tmp_packets, tmp_bytes, packets = 0, bytes = 0;
476 	struct cxgb4_tc_port_matchall *tc_port_matchall;
477 	struct cxgb4_matchall_ingress_entry *ingress;
478 	struct port_info *pi = netdev2pinfo(dev);
479 	struct adapter *adap = netdev2adap(dev);
480 	int ret;
481 	u8 i;
482 
483 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
484 	if (tc_port_matchall->ingress.state == CXGB4_MATCHALL_STATE_DISABLED)
485 		return -ENOENT;
486 
487 	ingress = &tc_port_matchall->ingress;
488 	for (i = 0; i < CXGB4_FILTER_TYPE_MAX; i++) {
489 		ret = cxgb4_get_filter_counters(dev, ingress->tid[i],
490 						&tmp_packets, &tmp_bytes,
491 						ingress->fs[i].hash);
492 		if (ret)
493 			return ret;
494 
495 		packets += tmp_packets;
496 		bytes += tmp_bytes;
497 	}
498 
499 	if (tc_port_matchall->ingress.packets != packets) {
500 		flow_stats_update(&cls_matchall->stats,
501 				  bytes - tc_port_matchall->ingress.bytes,
502 				  packets - tc_port_matchall->ingress.packets,
503 				  0, tc_port_matchall->ingress.last_used,
504 				  FLOW_ACTION_HW_STATS_IMMEDIATE);
505 
506 		tc_port_matchall->ingress.packets = packets;
507 		tc_port_matchall->ingress.bytes = bytes;
508 		tc_port_matchall->ingress.last_used = jiffies;
509 	}
510 
511 	return 0;
512 }
513 
cxgb4_matchall_disable_offload(struct net_device * dev)514 static void cxgb4_matchall_disable_offload(struct net_device *dev)
515 {
516 	struct cxgb4_tc_port_matchall *tc_port_matchall;
517 	struct port_info *pi = netdev2pinfo(dev);
518 	struct adapter *adap = netdev2adap(dev);
519 
520 	tc_port_matchall = &adap->tc_matchall->port_matchall[pi->port_id];
521 	if (tc_port_matchall->egress.state == CXGB4_MATCHALL_STATE_ENABLED)
522 		cxgb4_matchall_free_tc(dev);
523 
524 	if (tc_port_matchall->ingress.state == CXGB4_MATCHALL_STATE_ENABLED)
525 		cxgb4_matchall_free_filter(dev);
526 }
527 
cxgb4_init_tc_matchall(struct adapter * adap)528 int cxgb4_init_tc_matchall(struct adapter *adap)
529 {
530 	struct cxgb4_tc_port_matchall *tc_port_matchall;
531 	struct cxgb4_tc_matchall *tc_matchall;
532 	int ret;
533 
534 	tc_matchall = kzalloc(sizeof(*tc_matchall), GFP_KERNEL);
535 	if (!tc_matchall)
536 		return -ENOMEM;
537 
538 	tc_port_matchall = kcalloc(adap->params.nports,
539 				   sizeof(*tc_port_matchall),
540 				   GFP_KERNEL);
541 	if (!tc_port_matchall) {
542 		ret = -ENOMEM;
543 		goto out_free_matchall;
544 	}
545 
546 	tc_matchall->port_matchall = tc_port_matchall;
547 	adap->tc_matchall = tc_matchall;
548 	return 0;
549 
550 out_free_matchall:
551 	kfree(tc_matchall);
552 	return ret;
553 }
554 
cxgb4_cleanup_tc_matchall(struct adapter * adap)555 void cxgb4_cleanup_tc_matchall(struct adapter *adap)
556 {
557 	u8 i;
558 
559 	if (adap->tc_matchall) {
560 		if (adap->tc_matchall->port_matchall) {
561 			for (i = 0; i < adap->params.nports; i++) {
562 				struct net_device *dev = adap->port[i];
563 
564 				if (dev)
565 					cxgb4_matchall_disable_offload(dev);
566 			}
567 			kfree(adap->tc_matchall->port_matchall);
568 		}
569 		kfree(adap->tc_matchall);
570 	}
571 }
572